Nektur AI

Nektur AI Trust Center

Security, privacy, and assurance information for organizations evaluating Nektur AI.

Start your security review

Review the public information below, or request access to materials shared with current customers and qualified prospective customers.

Overview

The Trust Center describes how Nektur AI, LLC handles customer information, what the Nektur workspace does today, and which assurance materials exist.

Public policies are linked below. Additional security materials may be shared with approved reviewers. A status of “Not available” means that document does not exist and cannot be downloaded.

Nektur AI is a founder-led privacy technology company. This page describes product and operational controls that exist today. It does not claim certifications that have not been completed.

Casey Morganelli, PhD

Founder & CEO, Nektur AI, LLC

Customer workspace

Controls that are in the product today. Items not listed here are not implied.

  • Organization-scoped workspaces with membership checks
  • Role-based permissions for administrators and agents
  • Postgres row-level security for customer data isolation
  • Privileged service credentials are not used in the browser
  • Idle session handling through authenticated console access
  • Audit trails for scanning, consent, requests, and policies
  • Public consent and privacy-request intake rate limits
  • Consent logging stores hashed IP addresses where needed for the workflow
  • Policy publishing and request closure require a person
  • Ask Nek is scoped, audited, and rate-limited on refusals
  • Billing changes rely on authenticated flows and signed webhook verification
  • Marketing, app, and platform-admin surfaces are separated by host and route

Data handling

Customer workspace records are limited to that organization. Stored data is protected with provider-supported encryption.

  • Encrypted connections in transit
  • Organization-isolated database access
  • Access limited by organization membership and role
  • Provider-supported encryption for stored data
  • Subprocessors are published for customer review
  • Retention and deletion follow product and contractual terms
  • Customer content is not used as public marketing material
  • Restricted security materials are shared only after review

Compliance and frameworks

These are frameworks customers commonly ask about. A listing describes product context or reference material. It is not a certification or attestation of Nektur AI. CISSP, CISM, CIPP/US, CIPM, and AIGP are individual credentials held by Casey Morganelli.

GDPR

Product capability context

US state privacy laws

Product capability context

SOC 2

Not available

ISO 27001

Reference

NIST

Reference

Documents

Public policies open immediately. Requestable materials are provided after review. Items marked“Not available” are not ready to share.

Assurance

Security overview

Available on request

Assurance

Insurance certificates

Available on request

Assurance

Data processing addendum

Available on request

Assurance

SOC 2 Type II report

Not available

Assurance

Independent test of Nektur systems

Not available

Our own systems

This list is about Nektur AI's own website and product. It does not invent assurance reports that do not exist.

  • Independent third-party testNot available
  • Published SOC 2 reportNot available

Continuity and insurance

Customer materials are kept according to product and contractual terms. Insurance certificates can be requested. This page does not publish carrier names, limits, or policy numbers.

  • Professional liability (E&O) insurance
  • Cyber liability insurance
  • Backup restoration testingNot available

AI in the product

  • Ask Nek is scoped to privacy work and audited on allow and deny decisions.
  • Teams keep final decisions for publishing policies and closing privacy requests.
  • Customer content is not used to train a general-purpose model without written authorization.

Risk profile

A short view of how Nektur AI treats customer information and workspace access.

  • Workspace access is limited by organization and role
  • Customer documents, findings, and request contents are not used as public marketing
  • Public forms are rate-limited and do not receive privileged service credentials
  • Restricted security materials are shared only after review
  • This page does not claim certifications that have not been completed

Reports and assurance materials

These are materials we can discuss with approved reviewers. “Not available” means the artifact does not exist.

Current

  • Security overviewAvailable on request
  • Insurance certificatesAvailable on request
  • Data processing addendumAvailable on request

Not available

  • SOC 2 Type II reportNot available
  • Independent penetration test of Nektur systemsNot available

Request restricted materials

Restricted security materials may be provided to current customers and qualified prospective customers after review. Some materials may require a nondisclosure agreement. Requests are not approved automatically. Write to privacy@nektur.ai.